Dockerfile.slim

FROM ruby:3.0-slim-bullseye

ENV DEBIAN_FRONTEND=noninteractive

# Install Node.js
RUN apt-get update && \
    apt install -y --no-install-recommends curl && \
    curl -fsSL https://deb.nodesource.com/setup_16.x | bash - && \
    apt-get install -y nodejs && \
    rm -rf /share/doc && \
    apt-get -y --auto-remove purge curl && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

# Enable jemalloc
RUN apt-get update && \
    apt-get -y --no-install-recommends install libjemalloc2 && \
    ln -nfs /usr/lib/$(uname -m)-linux-gnu /usr/lib/linux-gnu && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*
ENV LD_PRELOAD=${LD_PRELOAD}:/usr/lib/linux-gnu/libjemalloc.so.2

ENV PATH="${PATH}:/opt/ruby/bin:/opt/node/bin:/opt/mastodon/bin"

# Create the mastodon user
ARG UID=991
ARG GID=991
SHELL ["/bin/bash", "-o", "pipefail", "-c"]
RUN apt-get update && \
    echo "Etc/UTC" > /etc/localtime && \
    apt-get -y --no-install-recommends install whois wget && \
    addgroup --gid $GID mastodon && \
    useradd -m -u $UID -g $GID -d /opt/mastodon mastodon && \
    echo "mastodon:$(head /dev/urandom | tr -dc A-Za-z0-9 | head -c 24 | mkpasswd -s -m sha-256)" | chpasswd && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

COPY --chown=mastodon:mastodon . /opt/mastodon

# Run mastodon services in prod mode
ENV RAILS_ENV="production"
ENV NODE_ENV="production"

ARG GIT_COMMIT
ENV SOURCE_TAG=$GIT_COMMIT

# Tell rails to serve static files
ENV RAILS_SERVE_STATIC_FILES="true"
ENV BIND="0.0.0.0"

# Build mastodon, and set permissions
RUN apt-get update && \
    apt-get -y --no-install-recommends install \
      apt-utils build-essential git libicu-dev libidn11-dev \
      libpq-dev libprotobuf-dev protobuf-compiler shared-mime-info \
      libssl1.1 libpq5 imagemagick ffmpeg libyaml-0-2 \
      file ca-certificates tzdata libreadline8 gcc tini && \
    ln -s /opt/mastodon /mastodon && \
    gem install bundler && \
    npm install -g npm@latest && \
    npm install -g yarn && \
    cd /opt/mastodon && \
    bundle config set --local deployment 'true' && \
    bundle config set --local without 'development test' && \
    bundle config set silence_root_warning true && \
    bundle install -j"$(nproc)" && \
    yarn install --pure-lockfile && \
    OTP_SECRET=precompile_placeholder SECRET_KEY_BASE=precompile_placeholder bundle exec rails assets:precompile && \
    rm -rf /opt/mastodon/node_modules/.cache && \
    chown -R mastodon:mastodon /opt/mastodon && \
    npm cache clean --force && \
    yarn cache clean && \
    apt-get -y --auto-remove purge \
      git libicu-dev libidn11-dev libpq-dev libprotobuf-dev \
      protobuf-compiler shared-mime-info gcc build-essential && \
    apt-get -y --no-install-recommends install \
      libssl1.1 libpq5 imagemagick ffmpeg libjemalloc2 \
	    libicu67 libprotobuf23 libidn11 libyaml-0-2 \
	    ca-certificates tzdata libreadline8 && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*

# Set the run user
USER mastodon

# Set the work dir and the container entry point
WORKDIR /opt/mastodon
ENTRYPOINT ["/usr/bin/tini", "--"]
EXPOSE 3000 4000